Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa
File: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (raw, json)
Hash identifier: vE6Bglvm4PcPa5TruHScEIwdG5N3T1D3jMCTs24u2Ig=
Subject key identifier: CB:67:86:61:6F:C0:A8:5C:37:62:D2:11:27:0A:37:AF:B1:98:DA:65
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3C0E
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:26:18 +0000
ROA not before: Fri 04 Jul 2025 14:50:22 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10160
IP address blocks: 119.59.24.0/24 maxlen: 24
119.59.25.0/24 maxlen: 24
119.59.26.0/24 maxlen: 24
119.59.27.0/24 maxlen: 24
119.59.28.0/24 maxlen: 24
119.59.29.0/24 maxlen: 24
119.59.30.0/24 maxlen: 24
119.59.31.0/24 maxlen: 24
119.59.32.0/24 maxlen: 24
119.59.33.0/24 maxlen: 24
119.59.34.0/24 maxlen: 24
119.59.35.0/24 maxlen: 24
119.59.36.0/24 maxlen: 24
119.59.37.0/24 maxlen: 24
119.59.38.0/24 maxlen: 24
119.59.39.0/24 maxlen: 24
119.59.40.0/24 maxlen: 24
119.59.41.0/24 maxlen: 24
119.59.42.0/24 maxlen: 24
119.59.43.0/24 maxlen: 24
119.59.44.0/24 maxlen: 24
119.59.45.0/24 maxlen: 24
119.59.46.0/24 maxlen: 24
119.59.47.0/24 maxlen: 24
119.59.48.0/24 maxlen: 24
119.59.49.0/24 maxlen: 24
119.59.50.0/24 maxlen: 24
119.59.51.0/24 maxlen: 24
119.59.52.0/24 maxlen: 24
119.59.53.0/24 maxlen: 24
119.59.54.0/24 maxlen: 24
119.59.55.0/24 maxlen: 24
119.59.56.0/24 maxlen: 24
119.59.57.0/24 maxlen: 24
119.59.58.0/24 maxlen: 24
119.59.59.0/24 maxlen: 24
119.59.60.0/24 maxlen: 24
119.59.61.0/24 maxlen: 24
119.59.62.0/24 maxlen: 24
119.59.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15374 (0x3c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Jul 4 14:50:22 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4aefa-f19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:dc:bd:9a:c5:69:b5:ca:ae:a3:e3:73:04:
3f:5d:26:81:10:59:8f:22:f9:57:3a:da:c8:34:e3:
94:81:1a:eb:e7:37:6d:36:12:6d:8e:d7:db:25:ea:
97:7e:cf:e6:f8:3f:97:09:cc:5c:b9:63:4e:0f:72:
50:be:c9:e2:d6:57:a8:7d:30:de:c1:79:a4:ab:80:
fa:26:70:d3:0e:68:31:4b:d2:29:52:d1:12:46:1c:
41:08:1f:46:f3:e4:9e:2e:bc:a9:77:7c:5b:70:59:
7a:90:87:81:6c:96:6e:d1:25:60:0f:f8:a2:ba:88:
6a:a1:6d:93:ac:d8:6d:da:c0:d9:6d:7e:b9:b9:d9:
66:84:50:a6:33:b4:11:f7:90:56:c8:85:4f:f0:fb:
75:c0:15:d4:7e:57:47:dc:f5:99:41:8a:a6:8e:60:
91:4b:0c:33:61:06:f9:89:3a:be:36:8b:c7:18:85:
a3:b6:37:d2:30:7f:e5:eb:3c:68:8a:b8:84:f7:e4:
52:86:c2:89:13:a1:09:c3:65:25:b4:5d:a4:a7:2c:
fb:92:5b:9c:84:4a:68:ab:46:c5:61:49:20:0e:3c:
68:79:df:93:3a:09:13:41:e7:9d:31:91:aa:36:90:
f1:2e:56:51:66:d1:9a:09:b0:f4:4b:b0:2e:4e:5b:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:67:86:61:6F:C0:A8:5C:37:62:D2:11:27:0A:37:AF:B1:98:DA:65
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.59.24.0-119.59.63.255
Signature Algorithm: sha256WithRSAEncryption
2a:cd:a5:94:5b:e4:4f:0e:94:9c:2b:81:2b:32:89:e2:a0:15:
b1:ec:fb:bd:5e:5e:7a:6b:bc:f9:1a:3d:a9:b0:68:56:65:ce:
ee:c4:65:86:8a:de:13:83:81:9c:fc:f9:0a:9e:34:5f:37:22:
6c:83:e3:a3:71:95:e2:ca:c8:1e:ce:40:c9:c4:f6:c7:f7:7e:
cd:4d:24:68:ea:bd:6d:23:ae:cb:57:d1:2c:1d:21:fe:76:96:
c0:82:9c:cf:5d:e4:e2:bc:f5:5b:5f:a8:eb:6b:b8:8f:15:b8:
75:41:60:2b:7c:8e:20:db:71:62:84:db:db:ca:20:63:71:e7:
9f:61:3e:b2:6a:28:88:af:42:e2:19:f9:ec:e1:1d:de:1a:6b:
d4:82:8e:79:e5:db:2e:a3:82:c3:b5:43:20:c4:88:9b:3d:3d:
a7:2b:fb:b0:db:98:d5:fd:cf:d8:7c:02:44:34:dd:d5:27:a6:
99:a3:75:9b:9f:8b:d7:9e:b2:c4:2d:d1:c4:b4:ce:8e:f3:eb:
e5:dc:db:e1:0e:de:14:55:f1:1e:ef:a7:f6:3b:d0:02:3a:84:
57:e2:02:65:fa:e9:68:00:f7:ca:25:ec:c1:5e:6b:68:b2:16:
5f:24:f3:4c:2e:c3:a1:32:97:26:0c:c8:db:22:a8:39:d7:04:
58:85:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:27 2026 by rpki-client